Privacy Policy — yes66

Introduction

This Privacy Policy ("Policy") is issued by yes66 ("we", "us", "our", "the Platform") and applies to all personal data collected from individuals ("you", "the User", "the Player") who access or use the yes66 website at https://yes66.cam and all associated services, including the online casino platform, sports betting services, live gaming features, and customer support channels.

yes66 is committed to protecting the privacy and personal information of all users, with particular care given to the data of our Malaysian player base across Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and other locations throughout Malaysia.

This Policy explains what personal data we collect, the purposes for which we process it, with whom we share it, how long we retain it, and the rights you have in relation to your data. It should be read alongside our Terms & Conditions and Responsible Gambling Policy, both of which are incorporated by reference.

Definitions

The following definitions apply throughout this Policy:

• "Personal Data" means any information relating to an identified or identifiable natural person, including name, identification number, contact details, financial information, and online identifiers.
• "Processing" means any operation performed on personal data, including collection, storage, use, disclosure, transmission, erasure, or destruction.
• "Data Controller" means yes66, the entity that determines the purposes and means of processing personal data collected through the Platform.
• "Data Processor" means any third party that processes personal data on behalf of yes66, such as payment processors, identity verification services, and IT infrastructure providers.
• "Consent" means any freely given, specific, informed, and unambiguous indication of the data subject's agreement to the processing of their personal data.
• "Platform" means the yes66 website, mobile interface, and all associated services accessible at https://yes66.cam.

Personal Data We Collect

yes66 collects personal data through several channels and at various touchpoints across the Platform. The categories of data we collect include, but are not limited to, the following:

3.1 Data Provided Directly by You

3.2 Data Collected Automatically

How We Use Your Personal Data

yes66 uses your personal data for the following purposes:

• Account Management: To create, maintain, and administer your yes66 Account, including processing your login credentials, managing your balance, and maintaining a record of your activity on the Platform.
• Identity Verification (KYC): To verify your identity and age (minimum 21 years) in compliance with anti-money laundering (AML) and responsible gambling obligations before processing withdrawals or at any time we reasonably require verification.
• Payment Processing: To process deposits and withdrawals via your chosen Malaysian payment method, including Touch 'n Go eWallet, DuitNow, FPX, and major bank portals. We work with authorised payment processor partners who are bound by strict data security obligations.
• Customer Support: To respond to your queries, resolve complaints, and provide assistance via live chat and email.
• Security & Fraud Prevention: To detect, investigate, and prevent fraudulent transactions, money laundering, bonus abuse, account takeover attempts, and other unlawful activity.
• Responsible Gambling: To monitor betting patterns and provide responsible gambling tools, including deposit limits, session controls, and self-exclusion mechanisms, as described in our Responsible Gambling Policy.
• Legal Compliance: To comply with applicable legal obligations, regulatory requirements, court orders, and the lawful requests of law enforcement and regulatory authorities.
• Platform Improvement: To analyse usage patterns, conduct performance testing, and make improvements to the Platform's functionality, games, and user experience.
• Marketing Communications: To send promotional offers, bonus notifications, and platform updates to users who have provided consent. You may withdraw this consent at any time.

Legal Basis for Processing

yes66 processes your personal data on the following legal bases:

• Contractual Necessity: Processing required to perform the contract between yes66 and you, including account management, payment processing, and provision of gaming services.
• Legal Obligation: Processing required to comply with AML regulations, KYC obligations, responsible gambling requirements, and any other applicable legal or regulatory duties.
• Legitimate Interests: Processing carried out to pursue yes66's legitimate business interests, including fraud detection, Platform security, analytics, and service improvement, where these interests are not overridden by your fundamental rights.
• Consent: Processing for marketing communications and certain cookie usage, which is only carried out where you have provided specific, informed, and freely given consent. You retain the right to withdraw consent at any time.

Data Sharing & Third-Party Disclosure

yes66 does not sell, rent, or disclose your personal data to third parties for their own commercial marketing purposes. We may share your personal data with the following categories of third parties only as necessary for the purposes described in this Policy:

• Payment Processors: Authorised partners who facilitate transactions via Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, and other payment channels. These partners receive only the data necessary to process the relevant transaction and are bound by strict data security agreements.
• Identity Verification Providers: Third-party KYC and AML compliance services that assist in verifying the identity and age of players.
• IT Infrastructure Providers: Cloud hosting, server, and data storage providers that support the technical operation of the Platform.
• Analytics Providers: Services that help us understand Platform usage patterns on an aggregated and anonymised basis.
• Regulatory and Law Enforcement Authorities: Where required by applicable law, court order, or the lawful request of a relevant regulatory or law enforcement authority.
• Professional Advisors: Legal counsel, auditors, and other professional advisors engaged to support yes66's compliance, legal, or financial obligations, subject to professional confidentiality obligations.

Data Retention

yes66 retains personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following general retention principles apply:

• Active Account Data: Retained for the duration of your active account relationship with yes66, plus a minimum period of five (5) years following account closure to satisfy AML and financial record-keeping obligations.
• KYC Documentation: Retained for a minimum of five (5) years from the date of the last transaction on your Account, in accordance with standard AML compliance requirements.
• Transaction Records: Financial transaction records are retained for a minimum of seven (7) years from the date of each transaction.
• Communications: Support communications and correspondence are retained for a period of three (3) years from the date of the last interaction.
• Marketing Data: Where consent for marketing has been withdrawn, your details will be removed from active marketing lists within 30 days, subject to retention of a suppression record to prevent future unsolicited contact.

Upon expiry of the applicable retention period, personal data will be securely deleted or anonymised in accordance with yes66's data disposal procedures.

Cookies & Tracking Technologies

yes66 uses cookies and similar technologies (including web beacons, pixels, and session storage) to operate and improve the Platform. Cookies are small text files stored on your device that help us recognise you, maintain your session, and understand how you use the Platform.

8.1 Types of Cookies We Use

• Strictly Necessary Cookies: Required for the Platform to function. These enable core features such as user authentication, session management, and security. These cannot be disabled without affecting Platform functionality.
• Functional Cookies: Enhance your experience by remembering your preferences, language settings, and previously accessed features.
• Analytics Cookies: Collect aggregated, anonymised information about how users interact with the Platform to help us identify performance improvements. We do not use this data to identify individual users.
• Marketing Cookies: Used to track engagement with promotional content where you have consented to receive marketing communications from yes66.

8.2 Managing Cookies

You can manage, disable, or delete cookies through your browser settings. Please note that disabling strictly necessary cookies will impair the functionality of the Platform. For detailed guidance on managing cookies in your specific browser, refer to your browser provider's help documentation.

Your Data Rights

Subject to applicable law, you have the following rights in relation to the personal data yes66 holds about you. To exercise any of these rights, please contact our support team using the details provided in Section 14.

Data Security

yes66 implements comprehensive technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. Our security framework includes:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the Platform.
• Encryption of sensitive personal and financial data at rest using industry-standard algorithms.
• Role-based access controls limiting employee access to personal data on a strict need-to-know basis.
• Multi-factor authentication requirements for internal systems and privileged administrative access.
• Regular independent security audits, penetration testing, and vulnerability assessments.
• Real-time monitoring and intrusion detection systems covering all production infrastructure.
• Documented incident response procedures with defined escalation protocols and mandatory breach notification timelines.

While yes66 takes all reasonable precautions to secure your data, no digital platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your login credentials and should notify us immediately if you suspect any unauthorised access to your Account.

Minors & Age Restriction

yes66 is strictly an adults-only Platform. Access to and registration with yes66 is prohibited for individuals under the age of 21. We do not knowingly collect personal data from minors.

All accounts are subject to mandatory age verification through the KYC process. Where we discover or have reasonable grounds to believe that personal data has been provided by or on behalf of a person under the age of 21, we will immediately suspend the relevant account, delete the associated personal data, and take appropriate corrective action.

International Data Transfers

In the course of operating the Platform and providing services to Malaysian players, yes66 may transfer personal data to servers, processors, or partner organisations located outside Malaysia. Any such transfers are made subject to appropriate safeguards, including:

• Contractual data protection clauses with recipient entities that impose obligations equivalent to those applicable under this Policy.
• Transfer only to jurisdictions that provide an adequate level of data protection as recognised by applicable standards.
• Implementation of additional technical safeguards, such as encryption, where data is transferred to jurisdictions with lower baseline protections.

By using the yes66 Platform, you acknowledge that your personal data may be transferred and stored outside Malaysia for the purposes described in this Policy.

Changes to This Privacy Policy

yes66 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or regulatory requirements. Material changes to this Policy will be communicated to registered users via email notification and/or a prominent notice on the Platform, with a minimum of seven (7) days' notice before the changes take effect.

The "Last updated" date displayed at the top of this Policy indicates when the current version was last revised. Your continued use of the Platform following the effective date of any amended Policy constitutes your acceptance of the updated terms.

We recommend bookmarking this page and reviewing it periodically. The current version of this Policy is always accessible at https://yes66.cam/privacy-policy.

Contact Us — Data & Privacy Enquiries

For any questions, concerns, or requests relating to this Privacy Policy or the personal data yes66 holds about you, please contact us through the following channels:

• Support Email: support@yes66.cam — Please include the subject line "Privacy Enquiry" or "Data Request" for faster routing to the relevant team.
• Live Chat: Available 24 hours a day, 7 days a week, directly from any page on the yes66 Platform. For urgent matters, live chat is the recommended contact method — average first-response time is under 3 minutes.

All formal privacy and data rights requests submitted in writing will be acknowledged within three (3) business days and fully responded to within the applicable statutory timeframe.